46c17ffefbfcaa044cbbcbb33d6219da84538c22a51e53bff647c87da33a0bd9 | Triage

Submit
Reports

Overview

overview

Static

static

VenomRAT v...nt.exe

windows7-x64

VenomRAT v...nt.exe

windows10-2004-x64

VenomRAT v...er.exe

windows7-x64

1

VenomRAT v...er.exe

windows10-2004-x64

1

VenomRAT v...er.exe

windows7-x64

1

VenomRAT v...er.exe

windows10-2004-x64

1

VenomRAT v...er.exe

windows7-x64

1

VenomRAT v...er.exe

windows10-2004-x64

1

VenomRAT v...nc.exe

windows7-x64

1

VenomRAT v...nc.exe

windows10-2004-x64

1

VenomRAT v...ny.exe

windows7-x64

VenomRAT v...ny.exe

windows10-2004-x64

VenomRAT v...64.exe

windows7-x64

VenomRAT v...64.exe

windows10-2004-x64

VenomRAT v...er.exe

windows7-x64

VenomRAT v...er.exe

windows10-2004-x64

Analysis

max time kernel
134s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
22-11-2024 16:14

Sharing

Static task

static1

rat default asyncrat stormkitty

5 signatures

Behavioral task

behavioral1

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Client.exe

Resource

win7-20240903-en

asyncrat default rat

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Client.exe

Resource

win10v2004-20241007-en

asyncrat default rat

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.WinRTPresenter.Launcher.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.WinRTPresenter.Launcher.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Keylogger.exe

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Keylogger.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Plugins/Keylogger.exe

Resource

win7-20240903-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Plugins/Keylogger.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Plugins/hvnc.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Plugins/hvnc.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Stub/ClientAny.exe

Resource

win7-20240903-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Stub/ClientAny.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Stub/Clientx64.exe

Resource

win7-20240708-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Stub/Clientx64.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Venom RAT + HVNC + Stealer + Grabber.exe

Resource

win7-20241010-en

asyncrat default discovery rat

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/Venom RAT + HVNC + Stealer + Grabber.exe

Resource

win10v2004-20241007-en

asyncrat default discovery evasion execution rat trojan

windows10-2004-x64

20 signatures

150 seconds

Report Analysis Logs

General

Target

VenomRAT v6.0.3 (+SOURCE)/VenomRAT v6.0.3 (SOURCE)/DevExpress.WinRTPresenter.Launcher.exe
Size

13KB
MD5

de4449ac523ac31f66efe7f090360f71
SHA1

de7fcb8c16c7cab8255b8e31781efb0ffc45acce
SHA256

76a868948e5b4df73f5dab5606135f6bf10b598bdaa991737224edcb8fdd58db
SHA512

d43021c5878f08c38264e1882313959aa51b8dabf6649a64f476f3e7c0ba7fdaaac0f3edaa6fb3ea2e56889a5e78791236c1dfe8dbcd9218d7eab30a9ee4a56c
SSDEEP

192:CWOsh9lqaOG7Uuri11x9OFzACQS5y2VL:rOsZTVrYTORDQ7y

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\VenomRAT v6.0.3 (+SOURCE)\VenomRAT v6.0.3 (SOURCE)\DevExpress.WinRTPresenter.Launcher.exe
"C:\Users\Admin\AppData\Local\Temp\VenomRAT v6.0.3 (+SOURCE)\VenomRAT v6.0.3 (SOURCE)\DevExpress.WinRTPresenter.Launcher.exe"
1⤵
PID:4084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4084-0-0x00007FF855B13000-0x00007FF855B15000-memory.dmp

Filesize
8KB

Download
memory/4084-1-0x00000000009D0000-0x00000000009DA000-memory.dmp

Filesize
40KB

Download

© 2018-2024

Terms | Privacy